GET /api/agent-profiles/{id}/drift-status — the profile's CURRENT drift status (the live freeze evidence that accompanies a remediation proposal, or not-frozen). Owner-gated like the proposal queue it sits beside.

GET

/api/agent-profiles/{id}/drift-status

curl --request GET \
  --url https://example.com/api/agent-profiles/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/drift-status \
  --cookie supacloud_session=<supacloud_session>

Authorizations

• cookie_auth

Parameters

Path Parameters

id

required

string format: uuid

Agent-profile ID whose drift status to read

Responses

200

Current drift status (live freeze evidence, or not-frozen)

Media typeapplication/json

The CURRENT drift status of one profile for the read API (the agent-profile editor): the live freeze episode, if any, that the routed selector is honoring. frozen = false (and the rest None) means selection is running on the learned model normally. When frozen the fields carry the concrete regression evidence — surfaced next to the remediation proposal so the owner sees WHY a change was proposed before deciding.

object

frozen

required

Whether the profile is currently frozen (a live governor_profile_freeze).

boolean

frozen_at

When the freeze was raised.

string | null format: date-time

ks_statistic

The two-sample Kolmogorov-Smirnov statistic D that crossed significance.

number | null format: double

reason

A short human-readable reason citing the drift evidence.

string | null

reward_delta

The recent-vs-baseline mean-reward regression that triggered the freeze (negative = worse).

number | null format: double

Example^generated

{
  "frozen": true,
  "frozen_at": "2026-04-15T12:00:00Z",
  "ks_statistic": 1,
  "reason": "example",
  "reward_delta": 1
}

401

Authentication required

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object

code

required

Machine-readable, stable error code.

string

Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error

details

One of:

null

null

object

Present only on a quota-exceeded 403 — the inline upgrade-CTA payload.

object

key

required

The entitlement feature key that was hit, e.g. apps.max_count.

string

limit

required

The plan’s limit for this key.

integer format: int64

upgrade_url

required

Where to send the user to upgrade.

string

used

required

Current usage (count or bytes, per the key).

integer format: int64

error

required

Human-readable message (the server’s English text; the client may localize by code).

string

Example

{
  "code": "not_found"
}

403

Permission denied

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object

code

required

Machine-readable, stable error code.

string

Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error

details

One of:

null

null

object

Present only on a quota-exceeded 403 — the inline upgrade-CTA payload.

object

key

required

The entitlement feature key that was hit, e.g. apps.max_count.

string

limit

required

The plan’s limit for this key.

integer format: int64

upgrade_url

required

Where to send the user to upgrade.

string

used

required

Current usage (count or bytes, per the key).

integer format: int64

error

required

Human-readable message (the server’s English text; the client may localize by code).

string

Example

{
  "code": "not_found"
}

500

Structured server error

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object

code

required

Machine-readable, stable error code.

string

Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error

details

One of:

null

null

object

Present only on a quota-exceeded 403 — the inline upgrade-CTA payload.

object

key

required

The entitlement feature key that was hit, e.g. apps.max_count.

string

limit

required

The plan’s limit for this key.

integer format: int64

upgrade_url

required

Where to send the user to upgrade.

string

used

required

Current usage (count or bytes, per the key).

integer format: int64

error

required

Human-readable message (the server’s English text; the client may localize by code).

string

Example

{
  "code": "not_found"
}